Do not open public issues for vulnerabilities or exposed credentials. Report security issues through GitHub private vulnerability reporting in the affected Swap3D repository.

Revoke any API key that was committed, logged, or sent to a browser.